View in EDS

Análisis forense de sistemas y seguridad en aplicaciones web: Caso de estudio de UbiDesk.

Saved in:
Bibliographic Details
Title: Análisis forense de sistemas y seguridad en aplicaciones web: Caso de estudio de UbiDesk. (Spanish)
Alternate Title: Forensic analysis and security in web applications: Case study of UbiDesk. (English)
Authors: Hernán Puetate-Huera, Galo, David Narváez-Erazo, Luis, Anderson Vilañez-Ordoñez, Bryan, Mauricio Lucio-Vásquez, Edwin
Source: Holopraxis; ene-jun2025, Vol. 9 Issue 1, p15-37, 23p
Abstract (English): The security of web applications is a critical aspect for the functioning of organizations, due to the rise of digitalization and the increasing dependence on technological solutions based on various applications. This has made it necessary to address the vulnerabilities that compromise the integrity of information and the trust of users. The research aimed to conduct a forensic analysis of the source code and processes of the UbiDesk application from the company UboraTech, to identify vulnerabilities, flaws, and errors in information security, thus ensuring the availability, integrity, and confidentiality of the data used by the application. The methodology employed consisted of a static and dynamic analysis of the source code using the SonarQube tool, which evaluated the application's code against recognized security standards such as OWASP, including the identification of flaws, risks, and vulnerabilities based on best practices in cybersecurity. The results revealed that the application presents several critical vulnerabilities that compromise information security. These flaws not only impact data loss but also pose a significant risk to user privacy and the company's reputation. Based on the findings from the technical analysis, a set of corrective actions was developed to improve the security of UbiDesk's source code through a security management-focused approach, mitigating the challenges associated with the application's code security. [ABSTRACT FROM AUTHOR]
Abstract (Spanish): La seguridad de las aplicaciones web es un aspecto crítico para el funcionamiento de las organizaciones, debido al auge de la digitalización y la creciente dependencia de soluciones tecnológicas basadas en diversas aplicaciones. Esto ha hecho necesario abordar las vulnerabilidades que comprometen la integridad de la información y la confianza de los usuarios. La investigación tuvo como objetivo realizar un análisis forense del código fuente y los procesos de la aplicación UbiDesk de la empresa UboraTech, con el fin de identificar vulnerabilidades, fallos y errores en la seguridad de la información, garantizando así la disponibilidad, integridad y confidencialidad de los datos utilizados por la aplicación. La metodología empleada consistió en un análisis estático y dinámico de código fuente utilizando la herramienta SonarQube, que evaluó el código de la aplicación en comparación con estándares de seguridad reconocidos como OWASP donde se incluyó la identificación de fallas, riesgos y vulnerabilidades basadas en las mejores prácticas en ciberseguridad. Los resultados obtenidos revelaron que la aplicación presenta varias vulnerabilidades críticas que comprometen la seguridad de la información. Estas fallas no solo impactan en la pérdida de datos, sino que también representan un riesgo significativo para la privacidad de los usuarios y la reputación de la empresa. A partir de los hallazgos encontrados con el análisis técnico se desarrolló un conjunto de acciones correctivas para mejorar la seguridad del código fuente de UbiDesk mediante un enfoque centrado en la gestión de la seguridad, mitigando los desafíos asociados con la seguridad del código de la aplicación. [ABSTRACT FROM AUTHOR]
Copyright of Holopraxis is the property of Revista Holopraxis and its content may not be copied or emailed to multiple sites without the copyright holder's express written permission. Additionally, content may not be used with any artificial intelligence tools or machine learning technologies. However, users may print, download, or email articles for individual use. This abstract may be abridged. No warranty is given about the accuracy of the copy. Users should refer to the original published version of the material for the full abstract. (Copyright applies to all Abstracts.)
Database: Complementary Index
Description
Abstract:The security of web applications is a critical aspect for the functioning of organizations, due to the rise of digitalization and the increasing dependence on technological solutions based on various applications. This has made it necessary to address the vulnerabilities that compromise the integrity of information and the trust of users. The research aimed to conduct a forensic analysis of the source code and processes of the UbiDesk application from the company UboraTech, to identify vulnerabilities, flaws, and errors in information security, thus ensuring the availability, integrity, and confidentiality of the data used by the application. The methodology employed consisted of a static and dynamic analysis of the source code using the SonarQube tool, which evaluated the application's code against recognized security standards such as OWASP, including the identification of flaws, risks, and vulnerabilities based on best practices in cybersecurity. The results revealed that the application presents several critical vulnerabilities that compromise information security. These flaws not only impact data loss but also pose a significant risk to user privacy and the company's reputation. Based on the findings from the technical analysis, a set of corrective actions was developed to improve the security of UbiDesk's source code through a security management-focused approach, mitigating the challenges associated with the application's code security. [ABSTRACT FROM AUTHOR]
ISSN:25880942
DOI:10.61154/holopraxis.v9i1.3865